Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/cH3e4PkQ-Mmn2GLkq5xzQDNbsBk.roa
File: cH3e4PkQ-Mmn2GLkq5xzQDNbsBk.roa (raw, json)
Hash identifier: xIl8AfiIUzpupJ5k22Kj8K8IMrZE7rcS+435YtAGHkI=
Subject key identifier: 70:7D:DE:E0:F9:10:F8:C9:A7:D8:62:E4:AB:9C:73:40:33:5B:B0:19
Certificate issuer: /CN=caeed2e1bb505049adb39884436cf2cb3e745224
Certificate serial: 018D13D7ECCD820E79566880D24D451E42DF
Authority key identifier: CA:EE:D2:E1:BB:50:50:49:AD:B3:98:84:43:6C:F2:CB:3E:74:52:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu7S4btQUEmts5iEQ2zyyz50UiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/cH3e4PkQ-Mmn2GLkq5xzQDNbsBk.roa
Signing time: Tue 16 Jan 2024 19:55:34 +0000
ROA not before: Tue 16 Jan 2024 19:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 146.19.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:ec:cd:82:0e:79:56:68:80:d2:4d:45:1e:42:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caeed2e1bb505049adb39884436cf2cb3e745224
Validity
Not Before: Jan 16 19:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=707ddee0f910f8c9a7d862e4ab9c7340335bb019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8b:fd:ae:2f:20:18:fb:ea:97:a8:aa:54:58:
75:32:dd:c0:c5:2f:c7:de:40:dc:6e:4c:c8:40:3e:
29:b7:ce:cf:71:2f:1c:66:19:58:ad:16:05:4d:5c:
3f:be:b6:42:ff:fe:4d:3a:37:2e:f7:70:63:89:22:
8c:99:10:43:49:d7:f3:cd:ef:4d:2d:3f:4e:a6:67:
26:32:f8:5c:fc:b9:a0:b9:d6:8f:63:72:fc:c3:0a:
70:01:13:e0:59:9a:e5:55:40:d3:7f:5e:92:4d:af:
cc:4e:57:e9:9c:b9:12:e9:af:77:dd:d7:4c:53:26:
3d:14:97:79:3b:8b:a1:fe:b3:8e:95:15:b3:2f:aa:
37:85:09:83:34:51:7b:a6:ec:a4:33:9d:e1:40:be:
5b:80:77:b2:e2:4a:8b:84:59:e1:80:91:28:ef:ca:
60:93:14:42:8c:e9:6f:03:bc:b3:dc:17:05:c2:6b:
6b:db:b1:f0:a0:04:b5:34:b4:4a:c9:80:cb:b7:dd:
e6:7d:b6:76:60:59:41:07:1b:e8:25:4d:7d:55:09:
3b:d5:ad:56:6b:a0:3c:cf:3a:e2:81:7b:d9:91:eb:
4a:84:74:c0:26:7d:32:92:bf:ca:09:df:23:b7:a5:
23:62:b1:a7:0f:6a:9e:6c:42:16:cd:f0:84:76:10:
7f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7D:DE:E0:F9:10:F8:C9:A7:D8:62:E4:AB:9C:73:40:33:5B:B0:19
X509v3 Authority Key Identifier:
keyid:CA:EE:D2:E1:BB:50:50:49:AD:B3:98:84:43:6C:F2:CB:3E:74:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu7S4btQUEmts5iEQ2zyyz50UiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/cH3e4PkQ-Mmn2GLkq5xzQDNbsBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/yu7S4btQUEmts5iEQ2zyyz50UiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.190.0/24
Signature Algorithm: sha256WithRSAEncryption
77:7f:77:95:4c:f9:fb:44:f0:dd:a6:70:30:11:8d:2d:b8:1c:
1b:50:1d:ac:79:79:c0:41:44:30:49:19:a7:6c:81:77:b0:34:
62:13:84:5a:02:78:6e:c8:12:a5:d4:b6:48:59:f3:c1:2d:41:
28:b0:b4:a9:00:21:fa:09:0c:89:16:cb:58:12:cb:de:a5:8f:
94:25:5c:c6:aa:01:07:45:b6:21:80:2b:d9:9f:01:07:4a:2c:
e9:d9:f2:fb:22:e7:77:05:e6:54:e6:3e:87:ed:09:a0:d7:e3:
78:0f:1b:9e:b4:07:63:78:18:5b:33:04:c7:c8:64:64:51:34:
ca:81:6f:44:5b:0e:c3:91:60:16:0a:07:1d:10:52:69:fa:ad:
c9:53:1c:08:78:32:57:4c:c4:57:aa:24:80:aa:38:cf:8f:99:
5f:c9:35:7c:00:75:24:d0:65:69:d8:d7:a8:80:e5:cc:b8:41:
0b:79:7e:26:47:27:a7:54:9b:19:00:ae:8f:fd:9e:22:27:22:
36:0c:eb:a2:77:7b:e9:d7:d5:f7:9a:0e:f5:ac:b9:f6:d4:bf:
72:54:1b:70:b0:0c:76:d1:fd:7e:44:d7:aa:8e:ec:75:1c:50:
7b:dc:0c:b8:aa:6f:2c:58:5c:e4:44:41:6c:e5:c1:f6:1a:e8:
3f:ab:42:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0T1+zNgg55VmiA0k1FHkLfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZWVkMmUxYmI1MDUwNDlhZGIzOTg4NDQzNmNmMmNiM2U3
NDUyMjQwHhcNMjQwMTE2MTk1NTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDdkZGVlMGY5MTBmOGM5YTdkODYyZTRhYjljNzM0MDMzNWJiMDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArov9ri8gGPvql6iqVFh1Mt3AxS/H
3kDcbkzIQD4pt87PcS8cZhlYrRYFTVw/vrZC//5NOjcu93BjiSKMmRBDSdfzze9N
LT9OpmcmMvhc/LmgudaPY3L8wwpwARPgWZrlVUDTf16STa/MTlfpnLkS6a933ddM
UyY9FJd5O4uh/rOOlRWzL6o3hQmDNFF7puykM53hQL5bgHey4kqLhFnhgJEo78pg
kxRCjOlvA7yz3BcFwmtr27HwoAS1NLRKyYDLt93mfbZ2YFlBBxvoJU19VQk71a1W
a6A8zzrigXvZketKhHTAJn0ykr/KCd8jt6UjYrGnD2qebEIWzfCEdhB/9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHB93uD5EPjJp9hi5Kucc0AzW7AZMB8GA1UdIwQY
MBaAFMru0uG7UFBJrbOYhENs8ss+dFIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXU3UzRidFFVRW10czVpRVEyenl5ejUwVWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iYmNmYWEtN2M0NS00OTM1LTkxNTkt
ZGRlNzY5ZDdhZGU5LzEvY0gzZTRQa1EtTW1uMkdMa3E1eHpRRE5ic0JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9iYmNmYWEtN2M0NS00OTM1LTkxNTktZGRlNzY5ZDdhZGU5
LzEveXU3UzRidFFVRW10czVpRVEyenl5ejUwVWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhO+MA0G
CSqGSIb3DQEBCwUAA4IBAQB3f3eVTPn7RPDdpnAwEY0tuBwbUB2seXnAQUQwSRmn
bIF3sDRiE4RaAnhuyBKl1LZIWfPBLUEosLSpACH6CQyJFstYEsvepY+UJVzGqgEH
RbYhgCvZnwEHSizp2fL7Iud3BeZU5j6H7Qmg1+N4DxuetAdjeBhbMwTHyGRkUTTK
gW9EWw7DkWAWCgcdEFJp+q3JUxwIeDJXTMRXqiSAqjjPj5lfyTV8AHUk0GVp2Neo
gOXMuEELeX4mRyenVJsZAK6P/Z4iJyI2DOuid3vp19X3mg71rLn21L9yVBtwsAx2
0f1+RNeqjux1HFB73Ay4qm8sWFzkREFs5cH2Gug/q0IZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:42 2024 by rpki-client on console-fra.rpki-client.org